VULNERABILITY INTELLIGENCE
CVE-2025-13905
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-01-29
Last modified2026-06-17
Description
CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable service binaries are modified in the installation folder by a local user with normal privilege upon service restart.
Weakness classification
- cybersecurity@se.com: CWE-276